5033 matches found
CVE-2022-28863
An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily upload potentially dangerous files without restrictions via the /netact/sct dir parameter in conjunction with the operation=upload value...
CVE-2022-28865
CVE-2022-28865 affects Nokia NetAct 22 via the Site Configuration Tool. A malicious user can rename an uploaded file with a JavaScript payload, which is stored and later executed by a victim’s browser. The common delivery method is placing the payload in a URL parameter exposed to victims, using ...
CVE-2022-30280
Nokia NetAct 22 exposes a CSRF vulnerability at /SecurityManagement/html/createuser.jsf that lets remote attackers create users with arbitrary, including administrative, privileges. The app does not verify CSRF tokens, enabling exploitation via social engineering; impact ranges from unauthorized ...
CVE-2023-3833
creationtimestamp| type| source ---|---|--- 2023-07-22 21:58:13+00:00| seen| https://t.me/cibsecurity/67120...
aguttes.com Cross Site Scripting vulnerability OBB-3539986
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
toplinerowes.ie Cross Site Scripting vulnerability OBB-3539918
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
riding-vacations.info Cross Site Scripting vulnerability OBB-3539838
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
abandonware-france.org Cross Site Scripting vulnerability OBB-3539790
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-38195
creationtimestamp| type| source ---|---|--- 2023-07-22 20:24:32+00:00| seen| https://t.me/cibsecurity/67116...
janssentrack.be Cross Site Scripting vulnerability OBB-3539479
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sweetrepeats.online Cross Site Scripting vulnerability OBB-3538719
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-3247
creationtimestamp| type| source ---|---|--- 2023-07-22 12:24:14+00:00| seen| https://t.me/cibsecurity/67113...
pohlmanpainassociates.com Cross Site Scripting vulnerability OBB-3537188
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
nadacetomasebati.cz Cross Site Scripting vulnerability OBB-3537110
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
mtsac.edu Cross Site Scripting vulnerability OBB-3537098
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-37733
creationtimestamp| type| source ---|---|--- 2023-07-19 22:21:58+00:00| seen| https://t.me/cibsecurity/67018...
CVE-2023-33148
creationtimestamp| type| source ---|---|--- 2023-07-19 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8696 2023-07-22 17:37:23+00:00| published-proof-of-concept| https://t.me/dilagrafie/3124...
bahagia.us Cross Site Scripting vulnerability OBB-3521323
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-24834
creationtimestamp| type| source ---|---|--- 2023-07-13 18:11:42+00:00| seen| https://t.me/cibsecurity/66666 2024-06-12 05:22:53+00:00| published-proof-of-concept| https://t.me/orderofsixangles/2344 2024-07-22 22:50:49+00:00| seen| https://t.me/cvedetector/1475 2024-08-18 21:56:13+00:00|...